The vulnerability of the fch_misc_setup() function in the drivers/acpi/acpi_apd.c module of the ACPI driver (an extended configuration and power management interface) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the fchmiscsetup function in the drivers/acpi/acpiapd.c module of the ACPI driver an extended configuration and power management interface for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the pass_establish() function in the drivers/infiniband/hw/cxgb4/cm.c module of the Linux kernel’s InfiniBand driver allows a attacker to cause a service failure.

The vulnerability of the passestablish function in the drivers/infiniband/hw/cxgb4/cm.c module of the Linux kernel driver for InfiniBand relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ath12k_mac_op_hw_scan() function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath12kmacophwscan function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the pcl818_detach() function in the drivers/comedi/drivers/pcl818.c module exposes devices that support Linux kernel data collection, allowing an attacker to cause a service failure.

The vulnerability of the pcl818detach function in the drivers/comedi/drivers/pcl818.c module, which supports Linux kernel-based data collection devices, is related to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the snd_soc_new_compress() function in the sound/soc/soc-compress.c module allows a hacker to cause a system failure in Linux-based SoC systems.

The vulnerability of the sndsocnewcompress function in the sound/soc/soc-compress.c module, which is part of the Linux SoC audio support, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the igc_rd32() function in the drivers/net/ethernet/intel/igc/igc_main.c file of the Linux kernel’s Ethernet adapter support driver allows a hacker to cause a system failure.

The vulnerability of the igcrd32 function in the drivers/net/ethernet/intel/igc/igcmain.c file of the Linux kernel’s Ethernet adapter support driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

USN-8121-1 linux-aws-fips vulnerability

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

WordPress User Registration & Membership plugin <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule Manipulation vulnerability

Missing Authorization to Authenticated Contributor+ Content Access Rule Manipulation vulnerability discovered by darkmode in WordPress Plugin User Registration versions = 5.1.4...

USN-8098-5 linux-iot, linux-kvm vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

ALPINE-CVE-2026-28753

NGINX Plus and NGINX Open Source have a vulnerability in the ngxmailsmtpmodule module due to the improper handling of CRLF sequences in DNS responses. This allows an attacker-controlled DNS server to inject arbitrary headers into SMTP upstream requests, leading to potential request manipulation...

CVE-2026-28753

NGINX Plus and NGINX Open Source have a vulnerability in the ngxmailsmtpmodule module due to the improper handling of CRLF sequences in DNS responses. This allows an attacker-controlled DNS server to inject arbitrary headers into SMTP upstream requests, leading to potential request manipulation...

CVE-2026-28753 NGINX ngx_mail_proxy_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxmailsmtpmodule module due to the improper handling of CRLF sequences in DNS responses. This allows an attacker-controlled DNS server to inject arbitrary headers into SMTP upstream requests, leading to potential request manipulation...

CVE-2026-28753

NGINX Plus and NGINX Open Source have a vulnerability in the ngxmailsmtpmodule module due to the improper handling of CRLF sequences in DNS responses. This allows an attacker-controlled DNS server to inject arbitrary headers into SMTP upstream requests, leading to potential request manipulation...

CVE-2026-33173

A flaw was found in Rails Active Storage. A remote attacker, acting as a direct-upload client, can exploit this vulnerability by manipulating metadata during file uploads. By setting internal flags, the attacker can bypass the system's automatic MIME Multipurpose Internet Mail Extensions type...

WordPress ReviewX - WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin <= 2.2.10 - Incorrect Authorization to Unauthenticated Information Exposure and Data Manipulation vulnerability

WordPress ReviewX - WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin = 2.2.10 - Incorrect Authorization to Unauthenticated Information Exposure and Data Manipulation vulnerability discovered by abrahack in WordPress Plugin ReviewX versions =...

CVE-2026-4623 DefaultFuction Jeson-Customer-Relationship-Management-System API Module System.php server-side request forgery

A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. This affects an unknown function of the file /api/System.php of the component API Module. The manipulation of the argument url leads to...

UBUNTU-CVE-2026-33173

Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, DirectUploadsController accepts arbitrary metadata from the client and persists it on the blob. Because internal flags like identified and analyzed are stored in the...

Langflow 操作系统命令注入漏洞

Langflow is an open-source visualization framework developed by Langflow for building multi-agent and RAG applications. Prior to Langflow 1.9.0, there was a vulnerability related to operating system command injection. This vulnerability stemmed from unauthenticated remote shell injections in...

Tibco ActiveMatrix BusinessWorks和Tibco Enterprise Administrator 安全漏洞

Tibco ActiveMatrix BusinessWorks and Tibco Enterprise Administrator are both products of the American company Tibco. Tibco ActiveMatrix BusinessWorks is an integrated platform software for enterprise application integration and service orchestration. Tibco Enterprise Administrator is a management...

Zeeways Jobsite CMS SQL注入漏洞

Zeeways Jobsite CMS is a recruitment platform building tool developed by Zeeways Corporation. Zeeways Jobsite CMS has a SQL injection vulnerability. This vulnerability arises from SQL injection attacks, allowing unauthenticated attackers to inject SQL code through ID GET parameters and manipulate...